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Examples of Proofs by Recursion Induction 

by 
John McCarthy 

Recursion induction has turned out to have certain bug3 
and some res trie tions have to be imposed. The proof 3 given 
in the sections of my note3 reproduced belox* probably vjill 
turn out to satisfy whatever restrictions have to be imposed, 

4. R ecursion Induction . This is the main method for 
proving assertions about recursively defined functions. We 
state it as follows: 

Suppose f is a function defined by the equation 

* ' x l' * " * '^n' ** CL • 
where £ is an expression which may contain f . Suppose that 
r> we wish to prove that f(x i , ...,x n ) has some property for 

those x 1 ,...,x n for which it is defined. Assume that f 

has the property for the arguments occurring on the right side 
of the equation and prove on this hypothesis that it also has 

the property for the arguments x ± ,...,x . Then we may con- 

< l-i 
j ^lude that f has the property for all arguments for which 

'ilt is defined. 

Before Justifying the rule, we will give an example of 
it3 application. 
We define 

f (n,m,p). * (m » n -+ p,T -* f (n f m+l, (nH-l)p)) 
where n,m, and p are .integers. We shall prove that for 
any n,m,p for which f (n,m,p) is defined we have 

f (n,m,p) m p. 
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O Proof by recursion Induction : 

ni 
We have assuming f (n,nn-l # (mfl)p) m (nn-l)p 

'■ m£ i 

(m ~n-^,T-^f(n,m+l,(ra+l)p)) « (m^ - ~p^ - ^^ ( m+ i) p ) 

/ _ ni ni 

.-"ip 
ml 

which is* the desired formula. Hence th? theorem. 

cae general reaction go proofs by recursion induction 
ss*ms to be suspicion. However, we shall justify the method. 

Let M be the class of n-tuplets x^, . ,.,x for which 

f(x A , o.,,x n ) - £ ia defined. We express it as the union of 
disjoint classes M ,M 1 , . . . , etc. defined as follows, (x^ . . .,x n ) 
is in M Q if the evaluation of t(x^, . ..,x n ) does not involve 
the evaluation of any f (y^, ...,y n ). (in the example M Q con- 
sists of the triplets (n,m,p) fo? which n « m.) M k con- 
sists of those n-tuplets (x^, ...,*. ) for which the evalua- 
tion of f(x^, ...,x n ) involves the evaluation of at least 
one f(y 1# ...,y n ) with (y^, . . . ,y n ) £ \_ ± and all 
(y^, ...,y n ) which occur in M Q u, .. . jUM^^. 

Suppose nov/ that the hypothesis of rtcurt^on induction 
is satisfied. Then f(x 1 ,...,x J1 ) has the do3irea property 

for (x ± , ...,x n ) in M Q because the assumption made tf.j~.it f 

on the right side plays no role in computing f (x^,...,:*^). 

(In the example, transforming (m - n -* p, etc.) to 

(m « n *» ■ t - p, etc.) did not involve the induction hypo- 

theses.) This is the basis of a mathematical induction on k# 



o 
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Karnely, suppose that for all (y^* • • -,y n ) ^MqU, . ..,uK, ci 
f(y<j,...,y ) haa the desired property. Then i/e aooerfc that 
ffx^,...,;^) has the property for (x^,...,x )6 M^ be- 
cause the- assumption made in the recursion induction is in- 
volved in the proof only for (y^, . . . ,y n ) in \^- This 

concludes the justification* 

The important point to remember about recursion in- 
duction is that it says nothing about whether f(x^, •••# x n ) 
is defined. 

5 # Properties of the Functions of the Inte g ers . In 

chapter 2, section 6 we defined some of the elementary func- 
tions of the Integers recursively . We shall now prove some 
of their properties. 

We defined 
(1) rzw-n • (n m -* m,T •"* m*+n~) 
Theorem,. g.l . m+O « m 

Proof . rn+O ** (0 « -* m,T -* n^+CT) 

«■ (T ~» m,T -* m'+Cf } 
« m 



t 



Theorem 5»2 . (m+n) «* m*+n 

Proof. m*+n - (n « 0-*m J ,T~* (m')*+rT) 



(n * 0--*m',T-* (m*+n~)«) 



* (n - -*• m,T -+ m f +n~) f 



(m+n) 



by sub- 
stinting 
m* for m 
in {!) 

recursion 
induction 
hypothesis 
with m s for 
m 

talcing the 

successor 

function 

out of the 

conditional 

expression 



n 



Theorem 5.3 . 
Proof • 
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(nHn)+p ** (m+p)+n 

(m+n)+p « (n ~ -* ra,T ~» m'+nj-fp . 

«• (n « ~* m+p,T~* (m'+n^+p) 



(n ~ ~ 

(n « - 

(m+p)+n 



nn-p,T -* (m*+p)+n~) 
m«fp # T -> (nn-pj'-fn"") 



distribution 
of function 

recursion 
step 

Theorem 5.2 



Setting m « in Theorem 5.3 gives , 
(0+n)+p « (G*p)+n 
so that if we had O+ra « in we would have commutativity of ad- 
dition. In fact, we cannot prove O+rn » m without making 
some assumptions that take into account that we are dealing 
with the integers. For suppose our space consisted of the 
vertices of the binary tree where m* is the vertex just 
above and to the left and ra~ is the vertex just below and 



etc, 




is the bottom of the tree, m+n can be 
defined as above and of course satisfies 
Theorems 3.1,- 5.2, and 5.3 bu,t does not 
satisfy 0+m «* ra. 



We shall make the following assumptions: 

1. ra* f 

2. (m* Y m m 

3. (m £ 0)D((nf)« - m) 

which embody all of Peano's axioms except the induction 
axiom. 



Theorem 5.Jf. 


O+n f* n 


* 


Proof. 


0*n « (n »« ~* 0,T *■* F +n") 






• (n - -*■ n,T-* (O+n") 1 ) 


Theorem 5*2 




«• (n - -* n,T -* (n~) ' ) 


induction hy 
pothesis 




* (n m -+ n,T -»- n) 


axiom 3 




« n 
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Theorem 


5- 


.5 


Proof. 






Theorem 


5. 


6 


Proof. 







m+n * n+ra 

By Theorems 5.3 and 5.4 as remarked above. 



(m+n)+p « ra-f(n-fp) 

(m+n)+p ** (m+p)-m 

« (pVm)^n 

«* (p-m)-Kn 

«* m+(n+p) 



Theorem 5*3 

Theorem 5.5 

Theorem 5.3 

Theorem 5.5 
twice 



Ue now have some theorems concerning the product 
m/n « (n « -* 0,T -♦ nmn*n~) 



Theorem 5.7. 


ra*0 * 0\ 


Proof. 


intfO « (0 «* -* 0,T ""♦" ra,m 0") 




- 


Theorem 5.8. 


(Vn ■» 


Proof. 


0*n «• (n «• -*• 0,T -* 0+0* n**) 




«• (n »» -*• 0,T •* Oxn") 




« (n - -> 0,T -* 0) 



Theorem 5^ 

recursion in- 
duction hypo- 
thesis 



Theorem 5.9 * 
Proof. 



m*n ** n^m 

mxn * (n ■» 
« (n « 
« (n « 

^ T 

U (n «■ 

T 

« (n ' - 

«■ (m *■ 



0,T -* rn+mxn~) 

0,T ~+ rn+n* m) induction 

0,T -+ m+(m « -* 0, 

n~+rw m7 ) ) 

0,T -* (m * -* m+0 # 

ui+n~+n"V m~ ) 

# ra « -* 0,T -* (m%n"+n\in"} f 

0,n • -* f T -* (nW+inVn") 1 ) 



— ujrr^-T i"-" - ■ gw " '"midir- x —^ - — ' tr — -»-■-■ -« - *-* - ----- - * -* - -*■ ■ — -• — .^ ■-«*-- 
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The steps can now be worked baclcwards with m and n Inter- 
changed. 

Theorem 5. 10 . m*n* <* ra+m<n 

Proof . mxn 1 « (n> - -*• 0,T -** m+m<(n* )") 

* ro+m*n 

Theorem 5.11 . m^n+p) • mn+mp 

Proof . ia/(n+p) « m(p * -* n,T -* n»+p~) 

» (p » -* mn,T -♦ m(n'+p~)) 

*» (p s. o -* mn,T -* ifin»+mp~) induction 

hypothesis 

- (p <* -*• mn,T -» mn+(m+mp~) 

«* (p * -0 "♦ mn,T_-* mn+(p » -+ 0, 
T -»• ra+rnp" ) ) 

m (p « o -* ran+rap,T -* mn+mp) 
= mn+mp 

Theorem 5»12 « (ran)p «• m(np) 

Proof . (mn)p - (p » -* 0,T -» mn+(!nn)p~) 

» (p *» -" 0,T -* mn+m(np"")) 

« (p » 0-* 0,T -* m(n+np~) 

- m(p « -+ 0,T -♦ n+np~) 

« ffi(np) 

Tiiis proof is by Induction on p. Induction on m or n 
would also work. 

We make the definition 

m4n - (m - 0)v(n f 0)A(nf 4 ri"J 

Theorem 5.13 . 0£'n 

Proof . 0£n - (0 - 0)V(n / 0)A(0"6 n") . 

- T 
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("} Theorem 5«14 « (ra+p £ n+p ) « (in £ n) 

Proof . (u+p£iH-p) « (p «* •♦ m,T -+ ra*4-p~) 

(p « ~* n,T -* n*+p") 

• .** (p » -* ra £rn,T ~* Ta f -+p~£ n f +p~) 

• *• (p « -+ tn £ n,T ~* m* ^ n* ) 

m (p « o -* in * n,T -* (ra* « 0)V ^ 

(p< - 0)A((ifl' )~~ fa'D 
« (p «* -+ m£ n,T ~* in £:n) 



ra£ n 



6c Properties of Functions of Symbolic Expressions * In 

this section we shall use recursion induction to prove a num- 
ber of properties of functions of symbolic expressions. We 
start with the basic identities 

car[cons[x;y]] * x 

cdr[cons[xjy]] »' y > 

atom[x}v[ cons [ car [x] jcdr[x]] - xj 

^atomCconsfxjyJ] 

nullfxl ** x[x -NIL] 
where in this section we use «• for equality of S-expres- 
sions in general and not just for atomic S-expressions. 

We shall write x*y for cone [x;y] and our first ob- 
jective is to prove that concatenation is associative, i.e. 

Theorem 6»1 « [x*y]*z ** x*[y*z] 

Proof . The definition of x*y can be written 
x*y « [null[xl -*y;T-» cons[car[x];cdr[x]*y]] 

We have / < 

null[x*y] « [null[xj ^;null[y];T -* null [ cons [ car [x];cdr[xJ*y]J] 

- [null[x] -+ null[y ] ;T -+ F] 

« null[x]Anull[y] 
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car[x*yj « [null[xj *** car[yl;T-^ car[cons[car[x];cdr[x]*y] ] ] 

« [null[x] -* car[y];T-* car[x]J 
edr[x*y] ** [null[x] ~» cdr[y];T -* cdr[cons[car[x];cdr[x]*y) ] ] 

- [nullfx] -*• cdr[y] jT -* cdr[x]*y] 
Now we write 
[x*y]z m [null[x*yr -♦ zjT -* con3[car[x*y];cdr[^*yJ*zI] 

« [nullfx] -* (null[y] -* z;T -* * cons{ear[x*y];cdr[x»y}*zJ J; 
T -» cons [ car [x^] ;cdr[x*y]*z] ] 
We substitute the above derived results for car[x*y] and 
cdr[x*yj making use of the fact that the first occurrences of 
these Quantities have null[xj as a premise and the second oc- 
currences have~~null[xj as a premise • Thus we get 
[x*y]*z » [null[xl -* [null[y] -* z;T~* cons[car[y];cdr[y)*z31; . 
T ~* cons[car[x]j[cdr[x]*y]*z] 
« [nullfx] -+ y*z;T -* cons[car[x];cdr[x]*[y*z]]] 
* x*[y*z] 
Next we have 



t 



Theorem 6.2 . NIL*x « x 
x*NIL = x 



Proof. 



NIL«x » [null(NIL] -> x;T -+ cons [car [NIL 3; 
cdr[NIL]*x]] 
- x 
x*NIL » [nullfxj -* NILjT -+ cons[car[x]; 
cdr[x]*NIL]3 
« [null[x] -* x;T -** cons[car[x];cdr[x3)3 
— [null[x] -^x;T-*x] 
»x 



Next we consider 4 function reverse defined by 
reverse[x3 « [null[x] -♦ NIL;T -♦ reverse[cdr[x]]*con3[car[x];NIL]3 
which reverses the order of term3 in a list. 
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yhoorem 6.3. reverue[x*yl ~ reversely} "reverse [x 3 
Proof . . * 

revorse[x*y] « [nuilfx] ~* reverse [y];T -» reverse [conn [car [x]; 
cdr[x]*y]]] 

- [nuilfx] — reverse (y];T-* [null [ con3[ car [x]; 
cdr[x]*y]J -»NIL;T-» reverse [cdrf cons ( car [x] ;cdr[x]*y] ] ]*cons[ 
car[consf carfx] ;cdr[x]*y] } ;NIL] ] ] 

t 

« [nullfxj -*■ reverse [y]«NIL;T -+ reverse [cdr[ 
x] *y] *cons[car[x] ;NIL] ] 

« [null[x] -* reversefy] *NIL;T -»• reversely] • 
reverse[cdr[x]]#cons[car[x];NILj] 

• * reverse [y J «[null[x] -»- NIL;T -*■ reverse [cdr[ 
x]*cons[car[x];NIL]] 

, » reverse[y]*rever3e[x] 

Theorem 6.4 . rever3e[reverse[x]] *« x 
Proof . 

reverse(reverse[x]] ■> [null[x] -► re verse [ NIL J;T -* reverseC 
reverse[cdr[x]]*cons[car[x];NILl]] 

« [nullfx] -» NIL;T-» reversef cons [ car [ 
x] ;NIL] ] *re verse [ reverse [cdr[x] ]]] 

» [nullfx] -*x;T-* cons[car[x];NIL]*cdr[x] ] 
« [null[x] -*x;T-+ cons[car[x];cdr[x]]J 
«". x 

In chapter 2, we defined . — A^atomCll 

equal[x;y] - atom[x]Aatora[y]Ax « yA^tom[tf]/Aequal[cons[x]; 

car[y]Aequal[cdr[x];cdr[y] * 
subst[xjy;z] » [atomfz] ,r* [z «> y -* x;T -* z];T -♦ cons[subst[x;y; 

car[z ] ] ^ subst [x;y;cdr[z ] ] ] ] 

We now define < 

free[y;z] - [afcomfz] -* z / y;T -* free[y;car[z] ]Afreefy;cdr[z]]] 



■WWW—il H W I II I III I 
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We have 

Theorem 6.5 « free[y;zj Dequal[sub3t[x;y;zl;z J 
Proof. • 

free[y;z]Dequal[subnt[x;y;zJ;zJ «■ [freetyjz] "+ equolf 
3ubat[x;yjzJ;z]jT -* T] 

«. [abom[z] -* [freeiyjzj -♦ 
equal[3ubst(x;y;z);z3;T-^ T);T-* [free[y;z] —■ equalfsub3t[x;y;zl; 
z];T-* T]] 

- [atoui[z] ~* [z / y ** 
equal[[z - y -* x;T -♦ zJ;z);T-* T3;T -» [free[y;car[z]]Af reefy; 
cdr[z]] -» equal[cons[3ubst[xjy;car[z]];subst[x;y;cdr[z]]];T -* T]3 

m [atom[zJ -♦ [z ^ y -♦ 
equal[z;zJ;T -+ T);T-* [free[y;car[zJ3Afree[y;cdr[z}3 -* equalC 
car[con3[sub3tEx;yjcar[z]3;subst[xjy;cdr[zJ]33;car[zJ]A9qual[ 
cdr[cons[3ubst[x;y;car[zJ3;3ubst[x;y;cdr[z33]3;cdr , [z33;T -♦ T] 

where v?e U3ed the definition of eq ual and atom z and«-atom[con3lu;v3 3 

w [atom[z3 "* T;T -*• [free[y; 
car[z3JAfree[y;cdr[z31 "* equal[subst[T;y;car[zJ] jcar[z}}Aequal[ 
subst[x;y;cdr[z33;cdr[z]3;T -* T3J 

» [atom[z] -* T;T -* [free[y; 
car[z]]Afree[y;cdr[z]J -+ [free[y;car[zj -* equal[subst[x;y;car[z33; . 
car[zl3;T*^ T]A[free[y;cdr[z33 -* equal[subst[x;y;cdr[zl J;cdr[zJ3; 
T-*T];T-*T31 

■» [atom[z3 "■* T;T -*" [free[y; 
car[z]3Afree[y;cdr[z33 *"♦ TAT;T-* T33 

■» [atom[zJ "* T;T -+ Tj 

» T 
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